Similar operation template attack on RSA-CRT as a case study
Similar operation template attack on RSA-CRT as a case study
复制标题
DOI：
10.1007/s11432-017-9210-3
复制
发表时间：
2018-01
期刊：
影响因子：
--
通讯作者：
Sen Xu;Xiangjun Lu;Kaiyu Zhang;Yang Li-;Lei Wang;Weijia Wang;Haihua Gu;Zheng Guo;Junrong Liu;Dawu Gu
中科院分区：
文献类型：
--
作者：
Sen Xu;Xiangjun Lu;Kaiyu Zhang;Yang Li-;Lei Wang;Weijia Wang;Haihua Gu;Zheng Guo;Junrong Liu;Dawu Gu
模板攻击是最强大的旁路攻击方法，通常首先从受控分析设备构建泄漏配置文件，然后使用这些配置文件恢复目标设备的秘密。它基于以下事实：分析设备与目标设备具有相似的泄漏特性。在本研究中，我们关注单个设备中的相似操作，并提出了一种新的模板攻击变体，称为相似操作模板攻击（SOTA）。 SOTA 在公共变量（例如输入/输出）上构建模型，并恢复与公共变量类似的泄漏秘密变量的值。 SOTA的优点是可以避免额外的分析设备的需求。在本研究中，所提出的 SOTA 方法应用于简单的 RSA-CRT 实现。由于相似操作中的泄漏（几乎）相同，因此我们将 RSA-CRT 的安全性降低为 GF(q) 上的隐藏乘数问题（HMP），该问题可以使用我们提出的启发式算法按字节解决。我们提出的方法的有效性在实际泄漏场景中作为整个主要恢复过程得到了验证。
A template attack, the most powerful side-channel attack methods, usually first builds the leakage profiles from a controlled profiling device, and then uses these profiles to recover the secret of the target device. It is based on the fact that the profiling device shares similar leakage characteristics with the target device. In this study, we focus on the similar operations in a single device and propose a new variant of the template attack, called the similar operation template attack (SOTA). SOTA builds the models on public variables (e.g., input/output) and recovers the values of the secret variables that leak similar to the public variables. SOTA’s advantage is that it can avoid the requirement of an additional profiling device. In this study, the proposed SOTA method is applied to a straightforward RSA-CRT implementation. Because the leakage is (almost) the same in similar operations, we reduce the security of RSA-CRT to a hidden multiplier problem (HMP) over GF(q), which can be solved byte-wise using our proposed heuristic algorithm. The effectiveness of our proposed method is verified as an entire prime recovery procedure in a practical leakage scenario.